^ 1 



l1 y 



d. deleting the communication if the presence of said at least one 
preselected criterion is not determined; 

e. storing the communication if the presence of said at least one 
preselected criterion is determined. 

2. (Amended) The method of claim 1, wherein the preselected criterion 
comprises one or more subject matter categories. 

3. (Amended) The method of claim 2, wherein at least some of said subject 
matter categories comprise regular expressions. 

4. (Amended) The method of claim 3, wherein said regular expressions are 
weighted. 



5. Canceled. 



6. (New) The method of claim 2, wherein the preselected criterion is weighted. 

7. (New) The method of claim 4, wherein said regular expressions are weighted 
with either positive or negative values. 

8 (New) The method of claim 7, wherein regular expressions within a subject 
K>* * matter category having a negative value are before regular expressions havmg a positive 

value. 

9. (New) The method of claim 4, further comprising prioritizing the order in 
which regular expressions within a subject matter category are tested. 

1 0. (New) The method of claim 9, wherein said prioritizing reduces the likelihood 
of false hits. 



11. (New) The method of claim 1, where the computer network is a TCP/IP 
network, 

12. (New) The method of claim 1, wherein the computer network is a wide area 
network. 

13. (New) The method of claim I, wherein the computer network is a local area 
network. 

14. (New) The method of claim 2, wherein the presence of the preselected 
criterion in at least one of said categories comprises a match in a plurality of categories. 

15. (New) The method of claim 2, wherein said subject matter categories 
comprise key words. 

16. (New) The method of claim 15, wherein at least some of said key words are 
defined by the user, 

17. (New) The method of claim 2, further comprising assigning a threshold value 
to each subject matter category. 

18. (New) The method of claim 17, wherein at least some of said subject matter 
categories comprise one or more predetermined expressions. 

19. (New) The method of claim 18, further comprising assigning a value to said 
predetermined expressions. 

20. (New) The method of claim 19, further comprising summing the values of 
said predetermined expressions. 
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2 1 . (New) The method of claim 20, wherein said communication is further stored 
if the sum of the values of said predetermined expressions comprising a subject matter 
category equal or exceed the threshold value assigned to said subject matter category. 

22. (New) The method of claim 2 1 , wherein the threshold value of at least one 
subject matter category comprises equaling or exceeding the threshold value in a plurality 
of subject matter categories. 

23 . (New) The method of claim 2 1 , wherein said threshold values assigned to said 
subject matter categories are variable. 

24. (New) The method of claim 18, wherein said subject matter categories have 
a hierarchical relationship. 

25. (New) The method of claim 24, wherein said hierarchical relationship 
comprises defining the threshhold value for at least one subject matter category as the 
presence of predetermined expressions in a plurality of other subject matter caterogies, 

26. (New) The method of claim 24, wherein said hierarchical relationship 
comprises defining the threshhold value for at least one subject matter category as matching 
or exceeding the threshold value assigned to a plurality of other subject matter categories. 

27. (New) The method of claim 1 , further comprising outputting a report relating 
to the presence of said at least one preselected criterion. 

28. (New) The method of claim 27, wherein said report identifies individuals 
whose use of the computer network included communications which matched preselected 
criterion. 
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29. (New) The method of claim 27, wherein said report identifies network 
addresses where communications were received or origmated that included matched 
preselected criterion. 

30. (New) The method of claim 2, further comprising outputting a report relating 
to the presence of preselected criterion, wherein said report identifies the number of matches 
in a category. 

3 1 . (New) The method of claim 30, wherein said report is in a graphical foniiat. 

32. (New) The method of claim 27, wherein said report provides the text of all 
communications that match said preselected criterion. 

33. (New) The method of claim 27, wherein said report is in a human readable 

format. 

34. (New) A method for monitoring and maintaining an acceptable use policy 
for computer network usage comprising: 



a. 



capturing data on a network; 



b. 



removing data content that does not contain language elements; 
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c. 



testing the remaining content for the presence of predetermined 



expressions; 



d. 



maintaining a sum of values associated with said predetermined 



expressions found within at least one category; 



e. 



storing the remaining data if the sum of values associated with said 



0 



predetermined expressions within a category meets or exceeds a threshold value. 
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35. (New) The method of claim 34, wherein said computer network is a wide 
area network. 

36. (New) The method of claim 34, wherein said computer network is a local 
area network. 

37. (New) The method of claim 34, wherein said computer network is a TCP/IP 
area network. 

38. (New) The method of claim 34, wherein said expressions are weighted. 

39. (New) The method of claim 38, wherein said expressions are weighted with 
either positive or negative values. 

40. (New) The method of claim 39, further comprising prioritizing the order in 
which regular expressions within a subject matter category are tested. 

41. (New) The method of claim 40, wherein the negative valued regular 
expressions are tested first. 

42. (New) The method of claim 41, wherein said negative and positive valued 
regular expressions are separately tested in the order of largest value to smallest value. 

43. (New) The method of claim 40, wherein the order of said prioritizing is 
determined based upon reducing the likelihood of false hits, 

44. (New) The method of claim 34, wherein said expressions include regular 
expressions. 

45. (New) The method of claim 34, wherein the threshold value for at least one 
category comprises meeting or exceeding the threshold value for a plurality of other 
categories. 



46. (New) The method of claim 34, wherein the threshold value of at least one 
category comprises meeting or exceeding the threshold value for at least one other category 
and not meeting or exceeding the tlireshold value for at least another category. 

47. (New) The method of claim 35, wherein said threshold value for a category 
is variable. 

48. (New) The method of claim 34, further comprising outputting a report 
relating to the presence of predetermined expressions. 

49. (New) The method of claim 48, wherein said report identifies individuals 
whose use of the computer network included conmiunications which matched predetermined 
expressions. 

50. (New) The method of claim 48, wherein said report identifies network 
addresses where communications were received or originated that included matched 
predetermined expressions. 

51. (New) The method of claim 34, further comprising outputting a report 
relating to the presence of predetermined expressions, wherein said report identifies the 
number of matches in a category. 

52. (New) The method of claim 50, wherein said report is in a graphical format. 

53. (New) The method of claim 48, wherein said report provides the text of all 
communications that match said predetermined expressions. 

54. (New) The method of claim 48, wherein said report is in a human readable 

format. 



55. (New) A method for monitoring and maintaining an acceptable use policy 
for computer network usage comprising: 

a. capturing data on a network; 

b. removing data content that does not contain language elements; 
5 c. defining categories with weighted predetermined expressions; 

c. testing the remaining content for the presence of predetermined 

expressions; 

d. maintaining a sum of values associated with said predetermined 
expressions found within each category; 

10 e. storing the remaining data if the sum of values associated with said 

predetermined expressions present within a category exceeds a threshold value. 

56. (New) The method of claim 55, wherein said remaining data is stored only 
if the sum of predetermined expressions exceeds the threshold value in a plurality of 
categories. 

57. (New) The method of claim 55, wherein the threshold value for a category 
is defined as the presence of no predetermined expressions. 

58. (New) The method of claim 55, wherein said computer network is a wide area 
network. 

59. (New) The method of claim 55, wherein said computer network is a local area 
network. 

60. (New) The method of claim 55, wherein said computer network is a TCP/IP 
area network. 
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6 1 . (New) The method of claim 55, further comprising outputting a report relating 
to the presence of predetermined expressions vvliose sum meets or exceeds the tiireshold 
value of a category. 

62. (New) The method of claim 55, wherein said report identifies individuals 
whose use of the computer network included communications which contained 
predetermined expressions whose sum matched or exceeded the threshold value of at least 
one categoiy. 

63. (New) The method of claim 55, wherein said report identifies network 
addresses where communications were received or originated that included predetermined 
expressions whose sum matched or exceeded the threshold value of at least one category, 

64. (New) The method of claim 63, wherein said reports are in a graphical format. 



